$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: KyHkHcVMx7xTs6msWIOemQHUl3LTU4O7N8rgRKWrS78= Subject key identifier: 22:49:EB:79:A9:37:C0:1B:D5:BD:01:AB:9C:71:1A:23:74:76:7D:A7 Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 0AAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 11D7 Signing time: Sat 18 Oct 2025 20:26:29 +0000 Manifest this update: Sat 18 Oct 2025 20:26:28 +0000 Manifest next update: Sat 25 Oct 2025 20:26:28 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: OzO9upYwoGESzLIHnDyCx3LV1b8B9AU3GSjfCxs4crg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2731 (0xaab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Validity Not Before: Oct 18 20:26:28 2025 GMT Not After : Oct 25 20:26:28 2025 GMT Subject: CN=68f3f7f5-b7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:75:6c:75:a7:06:47:90:4a:eb:29:fa:b3:d6: 5b:4e:d2:52:25:3e:01:78:45:61:8d:a5:4c:3c:43: fb:40:e7:a0:e3:c1:fc:ce:4b:59:bd:fd:3b:6f:fe: ac:d5:dc:98:8b:8a:f6:9a:ff:9d:83:1e:21:12:22: 08:d2:9b:ac:6e:54:6e:e5:28:57:b9:ff:8d:ef:26: 73:f8:83:4c:b1:be:1e:b5:24:06:de:33:ef:c6:9d: 08:e2:a8:85:97:da:a6:b5:8a:5d:2c:ff:02:cf:c0: e8:89:14:b8:98:a3:86:06:a0:dd:59:f6:bc:d9:ee: 75:af:11:3d:6a:8c:7d:dd:41:fd:07:49:7b:74:5a: 21:64:99:a3:39:eb:9b:bb:dc:91:a6:34:65:89:e7: af:4e:36:fe:27:90:5f:88:69:0d:bb:f6:ae:54:a7: a0:c7:30:33:ee:60:52:db:5e:0a:2e:27:f5:e5:53: a8:30:0d:8b:de:e6:0c:1a:35:36:7d:56:cf:c8:c2: 91:6b:25:a3:57:5c:8c:5f:3a:ad:bc:5d:56:d6:06: d3:8f:b3:5f:6d:5b:23:0f:62:06:23:95:3c:de:55: c1:82:1d:41:3a:c5:34:9d:03:64:94:f8:ec:59:fd: 0d:59:7c:a4:93:3e:35:09:04:d2:27:5f:d2:39:cd: e0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:49:EB:79:A9:37:C0:1B:D5:BD:01:AB:9C:71:1A:23:74:76:7D:A7 X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:4d:9e:2e:3c:5f:1c:b7:16:7e:5c:9e:13:dd:e7:a0:6a:c3: 47:26:25:74:2f:0b:e6:1b:92:4a:ac:7a:ab:d2:28:24:f6:f8: d6:e6:52:d5:57:0c:54:d2:75:05:f1:64:37:7a:3c:31:e2:78: a3:0a:12:de:e5:78:cf:47:18:94:1a:78:d0:16:d8:1a:65:2e: 20:d2:d1:59:35:d4:c7:54:20:84:65:4b:2f:1e:d9:b7:1d:c2: 6d:54:b1:e0:6b:3a:db:6e:cf:0d:e8:a4:e8:bc:a1:52:4b:c5: e0:c3:6c:8e:13:94:1f:c0:c4:9e:b1:3e:4c:9a:2c:e7:aa:0a: 16:82:75:44:59:ec:21:6b:b1:82:39:0a:fe:8f:a1:ae:4b:f0: 9b:86:28:f8:a0:6a:84:f8:50:1f:e6:ab:3d:b5:ac:19:72:fe: dd:69:66:99:b1:ce:00:4b:38:33:1d:38:a0:0b:57:61:12:3b: 5d:20:3d:f1:ca:dd:d2:75:6a:ce:e1:6f:5c:cb:9c:06:9f:12: a1:3c:3b:93:a6:b2:97:54:58:ea:64:1c:89:1f:13:d9:fa:02: 5e:31:ea:d5:0e:c2:a3:32:13:81:c4:5c:0c:29:a6:5a:4d:19: 1a:bc:75:3c:72:8c:c8:89:05:43:6f:16:5e:d5:37:be:cf:9e: 2f:bf:2a:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjUxMDE4MjAyNjI4WhcNMjUxMDI1MjAyNjI4WjAYMRYwFAYD VQQDEw02OGYzZjdmNS1iN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5XVsdacGR5BK6yn6s9ZbTtJSJT4BeEVhjaVMPEP7QOeg48H8zktZvf07b/6s 1dyYi4r2mv+dgx4hEiII0pusblRu5ShXuf+N7yZz+INMsb4etSQG3jPvxp0I4qiF l9qmtYpdLP8Cz8DoiRS4mKOGBqDdWfa82e51rxE9aox93UH9B0l7dFohZJmjOeub u9yRpjRlieevTjb+J5BfiGkNu/auVKegxzAz7mBS214KLif15VOoMA2L3uYMGjU2 fVbPyMKRayWjV1yMXzqtvF1W1gbTj7NfbVsjD2IGI5U83lXBgh1BOsU0nQNklPjs Wf0NWXykkz41CQTSJ1/SOc3gzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJJ63mp N8Ab1b0Bq5xxGiN0dn2nMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJTZ4uPF8ctxZ+XJ4T3eegasNHJiV0LwvmG5JKrHqr0igk9vjW5lLV VwxU0nUF8WQ3ejwx4nijChLe5XjPRxiUGnjQFtgaZS4g0tFZNdTHVCCEZUsvHtm3 HcJtVLHgazrbbs8N6KTovKFSS8Xgw2yOE5QfwMSesT5MmiznqgoWgnVEWewha7GC OQr+j6GuS/Cbhij4oGqE+FAf5qs9tawZcv7daWaZsc4ASzgzHTigC1dhEjtdID3x yt3SdWrO4W9cy5wGnxKhPDuTprKXVFjqZByJHxPZ+gJeMerVDsKjMhOBxFwMKaZa TRkavHU8cozIiQVDbxZe1Te+z54vvyrb -----END CERTIFICATE-----Generated at Mon Oct 20 16:43:26 2025 by rpki-client